
$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
File: 8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft (raw, json)
Hash identifier: LeKfuYTzl+jt/494OmrIa6thvXFzb6qj47NRYXb0530=
Subject key identifier: 9A:AA:04:90:4E:8C:BD:B8:C5:08:45:16:84:44:0B:B0:8F:E3:C7:48
Authority key identifier: 8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
Certificate issuer: /CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Certificate serial: 12F5C50D15991FD6B6443DA3C36A5B3286EB5CA3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
Manifest number: B3
Signing time: Thu 26 Mar 2026 14:51:24 +0000
Manifest this update: Thu 26 Mar 2026 14:46:24 +0000
Manifest next update: Fri 27 Mar 2026 16:24:24 +0000
Files and hashes: 1: 3137372e38352e382e302f32342d3234203d3e20323731323633.roa (hash: Ju72G5NPWzwFHCe9aM3r7rJQ+Ry+URdIWNHRW2JyXz0=)
2: 3137372e38352e382e302f32322d3232203d3e20323731323633.roa (hash: 1I9m2fUf9gQilzK/92MSjbd6eOb2/M7YEGAbTr8KTYs=)
3: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (hash: /0T78rqQobVja0DtJ8HTQAWJNYgm+gpT1gfJ9unfuSY=)
4: 323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (hash: tH083W2mbuvxIYkpuiCHf0maj5FH8hVwfI3NmzxecOg=)
5: 3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (hash: LKfai9OZTFCl04VmCLWnvJdSdPICsz5k6/PI4sSkmnA=)
6: 3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (hash: hUbthIaEtw9HFHw6obRsM2wDiMQWDo4OVWiLGBu5clg=)
7: 8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl (hash: X8LEF5y+iJ9940/MqbVPpgrvwxEZB278SYtQe6jgWlw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 16:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f5:c5:0d:15:99:1f:d6:b6:44:3d:a3:c3:6a:5b:32:86:eb:5c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Validity
Not Before: Mar 26 14:46:24 2026 GMT
Not After : Mar 27 16:24:24 2026 GMT
Subject: CN=9AAA04904E8CBDB8C508451684440BB08FE3C748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:2e:dd:c3:c4:a8:6d:d5:64:b1:19:76:c8:
57:61:a5:70:3f:e2:f5:2b:70:9f:00:b8:b6:87:23:
e5:ae:53:ec:23:9a:f2:ca:21:9f:59:11:d1:fc:90:
87:67:00:94:f4:33:f3:ef:7a:3a:87:b5:65:23:e8:
b1:c0:c7:38:b9:a6:78:2f:fa:11:10:97:3c:52:88:
3a:fb:c2:47:fb:a0:ed:4d:ef:93:c6:6e:f4:3e:d1:
6b:da:cd:4a:ab:21:ea:a5:f9:11:26:68:9a:78:1d:
bf:d0:59:59:48:5b:c9:ca:1e:9d:0f:6a:42:ce:f5:
54:20:44:d6:f3:5b:96:a3:47:c2:95:72:19:fd:ff:
c9:f5:43:77:66:81:e5:fc:0c:79:3c:8b:75:4c:f4:
9b:55:5b:e3:57:95:c6:33:f5:4d:fa:25:98:00:dc:
63:c6:ee:e6:d0:c3:12:1c:23:4e:96:34:35:ae:8b:
4d:6b:f7:c8:d8:aa:ec:26:68:c7:df:75:bd:c5:0e:
22:6f:3f:92:6e:aa:ed:91:2a:23:61:37:c4:88:66:
48:8b:28:0d:14:f0:31:22:39:3e:d7:96:1e:08:03:
73:c1:58:93:f0:2b:96:e8:1e:9b:96:78:07:0f:a2:
31:66:64:b6:bd:7d:4b:6c:da:28:96:a0:33:65:e3:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:04:90:4E:8C:BD:B8:C5:08:45:16:84:44:0B:B0:8F:E3:C7:48
X509v3 Authority Key Identifier:
keyid:8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:02:63:34:a4:b9:95:bc:8c:24:5e:b2:90:18:1f:dd:d2:
25:8c:3c:98:95:73:5e:41:c3:6c:20:03:5d:be:1f:8b:d5:ce:
0c:0a:f9:18:cd:af:15:ce:22:eb:4b:58:69:3e:b5:56:d9:10:
fc:3d:00:f8:bd:8d:71:d8:87:5f:30:75:a8:3f:7d:8a:7f:8a:
5b:9f:c5:83:6c:06:36:07:6e:67:bb:f9:90:a8:fc:9e:10:91:
e4:d5:73:99:0a:ea:05:33:38:99:f9:70:e4:f6:99:87:91:50:
1b:03:c8:5f:e7:49:3e:2a:62:d4:1d:89:80:a9:94:7c:97:63:
d0:bf:4f:ab:a3:de:2c:12:e0:56:9b:9e:59:03:a9:5c:36:31:
fc:1f:2c:c4:b5:82:3b:2a:e4:3f:0c:dd:02:82:ed:ca:c2:3d:
21:47:00:ca:df:cf:09:71:4f:25:c3:72:b2:80:d3:02:71:5e:
f3:16:9c:f0:9b:b0:b4:27:ec:51:7f:a1:89:c5:0d:31:1d:ad:
50:e1:15:4e:a9:4b:77:59:84:ce:67:d0:dd:2a:a1:fa:57:e2:
ed:d8:a7:4c:76:95:66:01:0d:58:4c:1d:3b:7b:e0:b8:cc:52:
70:33:6d:aa:34:52:c1:5d:05:f6:92:75:9d:60:f5:d9:c4:eb:
0f:1f:9b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:39 2026 by rpki-client